Re: [Freeipa-devel] Fwd: [freeipa] update to Java/8

2014-09-11 Thread Martin Kosek
My point was - we do not need Java for IPA package build (or do we?), we need rhino. Shouldn't then java be a dependency of rhino instead of freeipa package? On 09/09/2014 01:52 PM, Petr Vobornik wrote: > On 5.9.2014 12:35, Martin Kosek wrote: >> Petr, why do we require java-1.7.0-openjdk in Build

Re: [Freeipa-devel] [PATCH] 746-747 append domain into network.negotiate-auth.trusted-uris

2014-09-11 Thread Petr Vobornik
On 10.9.2014 19:33, Endi Sukma Dewata wrote: On 9/10/2014 9:59 AM, Petr Vobornik wrote: On 4.9.2014 21:26, Endi Sukma Dewata wrote: On 8/29/2014 11:00 AM, Petr Vobornik wrote: [PATCH] 746 webui: append network.negotiate-auth.trusted-uris https://fedorahosted.org/freeipa/ticket/4478 Some com

[Freeipa-devel] [PATCH 0291-0294] Fix locking to prevent crashes and deadlocks

2014-09-11 Thread Petr Spacek
Hello, I was fighting with random crashes for couple of days ... and discovered that run_exclusive_enter()/isc_task_beginexclusive() usage was completely incorrect and didn't actually lock anything. This series of patches reworks internal locking (and related event system) to work around lim

Re: [Freeipa-devel] [PATCH 0063] Update qrcode support for newer python-qrcode

2014-09-11 Thread Petr Viktorin
On 09/10/2014 11:50 PM, Nathaniel McCallum wrote: On Wed, 2014-09-10 at 17:41 -0400, Nathaniel McCallum wrote: This substantially reduces the FreeIPA dependencies and allows QR codes to fit in a standard terminal. https://fedorahosted.org/freeipa/ticket/4430 A note about this patch: Quick re

Re: [Freeipa-devel] [PATCH 0063] Update qrcode support for newer python-qrcode

2014-09-11 Thread Petr Vobornik
On 10.9.2014 23:50, Nathaniel McCallum wrote: On Wed, 2014-09-10 at 17:41 -0400, Nathaniel McCallum wrote: This substantially reduces the FreeIPA dependencies and allows QR codes to fit in a standard terminal. https://fedorahosted.org/freeipa/ticket/4430 A note about this patch: Quick review

Re: [Freeipa-devel] [PATCH] 0014 Fix typo causing ipa-upgradeconfig to fail

2014-09-11 Thread Martin Kosek
On 09/10/2014 03:18 PM, Jan Cholasta wrote: > Dne 10.9.2014 v 13:15 David Kupka napsal(a): >> https://fedorahosted.org/freeipa/ticket/4529 > > ACK. > Pushed to master, ipa-4-1, ipa-4-0. Martin ___ Freeipa-devel mailing list Freeipa-devel@redhat.com h

[Freeipa-devel] FreeIPA 4.0.3?

2014-09-11 Thread Martin Kosek
Hi team, It seems we have pretty serious bug in our FreeIPA 4.0.2 release, breaking upgrade from older releases: https://fedorahosted.org/freeipa/ticket/4529 We also have packaging fix requested by Fedora Server roles group: https://fedorahosted.org/freeipa/ticket/4430 It seems just these 2 bu

Re: [Freeipa-devel] FreeIPA 4.0.3?

2014-09-11 Thread Petr Viktorin
On 09/11/2014 01:37 PM, Martin Kosek wrote: Hi team, It seems we have pretty serious bug in our FreeIPA 4.0.2 release, breaking upgrade from older releases: https://fedorahosted.org/freeipa/ticket/4529 We also have packaging fix requested by Fedora Server roles group: https://fedorahosted.org

Re: [Freeipa-devel] FreeIPA 4.0.3?

2014-09-11 Thread Nathaniel McCallum
On Thu, 2014-09-11 at 15:46 +0200, Petr Viktorin wrote: > On 09/11/2014 01:37 PM, Martin Kosek wrote: > > Hi team, > > > > It seems we have pretty serious bug in our FreeIPA 4.0.2 release, breaking > > upgrade from older releases: > > > > https://fedorahosted.org/freeipa/ticket/4529 > > > > We also

Re: [Freeipa-devel] [PATCH 0291-0294] Fix locking to prevent crashes and deadlocks

2014-09-11 Thread Martin Basti
On 11/09/14 11:59, Petr Spacek wrote: Hello, I was fighting with random crashes for couple of days ... and discovered that run_exclusive_enter()/isc_task_beginexclusive() usage was completely incorrect and didn't actually lock anything. This series of patches reworks internal locking (and re

Re: [Freeipa-devel] FreeIPA 4.0.3?

2014-09-11 Thread Martin Kosek
On 09/11/2014 03:47 PM, Nathaniel McCallum wrote: > On Thu, 2014-09-11 at 15:46 +0200, Petr Viktorin wrote: >> On 09/11/2014 01:37 PM, Martin Kosek wrote: >>> Hi team, >>> >>> It seems we have pretty serious bug in our FreeIPA 4.0.2 release, breaking >>> upgrade from older releases: >>> >>> https:/

Re: [Freeipa-devel] FreeIPA 4.0.3?

2014-09-11 Thread Ludwig Krispenz
On 09/11/2014 04:04 PM, Martin Kosek wrote: On 09/11/2014 03:47 PM, Nathaniel McCallum wrote: On Thu, 2014-09-11 at 15:46 +0200, Petr Viktorin wrote: On 09/11/2014 01:37 PM, Martin Kosek wrote: Hi team, It seems we have pretty serious bug in our FreeIPA 4.0.2 release, breaking upgrade from o

Re: [Freeipa-devel] FreeIPA 4.0.3?

2014-09-11 Thread Nathaniel McCallum
On Thu, 2014-09-11 at 16:09 +0200, Ludwig Krispenz wrote: > On 09/11/2014 04:04 PM, Martin Kosek wrote: > > On 09/11/2014 03:47 PM, Nathaniel McCallum wrote: > >> On Thu, 2014-09-11 at 15:46 +0200, Petr Viktorin wrote: > >>> On 09/11/2014 01:37 PM, Martin Kosek wrote: > Hi team, > >

Re: [Freeipa-devel] FreeIPA 4.0.3?

2014-09-11 Thread Ludwig Krispenz
On 09/11/2014 04:17 PM, Nathaniel McCallum wrote: On Thu, 2014-09-11 at 16:09 +0200, Ludwig Krispenz wrote: On 09/11/2014 04:04 PM, Martin Kosek wrote: On 09/11/2014 03:47 PM, Nathaniel McCallum wrote: On Thu, 2014-09-11 at 15:46 +0200, Petr Viktorin wrote: On 09/11/2014 01:37 PM, Martin Kos

Re: [Freeipa-devel] FreeIPA 4.0.3?

2014-09-11 Thread Nathaniel McCallum
On Thu, 2014-09-11 at 16:21 +0200, Ludwig Krispenz wrote: > On 09/11/2014 04:17 PM, Nathaniel McCallum wrote: > > On Thu, 2014-09-11 at 16:09 +0200, Ludwig Krispenz wrote: > >> On 09/11/2014 04:04 PM, Martin Kosek wrote: > >>> On 09/11/2014 03:47 PM, Nathaniel McCallum wrote: > On Thu, 2014-09

Re: [Freeipa-devel] FreeIPA 4.0.3?

2014-09-11 Thread Ludwig Krispenz
On 09/11/2014 04:22 PM, Nathaniel McCallum wrote: On Thu, 2014-09-11 at 16:21 +0200, Ludwig Krispenz wrote: On 09/11/2014 04:17 PM, Nathaniel McCallum wrote: On Thu, 2014-09-11 at 16:09 +0200, Ludwig Krispenz wrote: On 09/11/2014 04:04 PM, Martin Kosek wrote: On 09/11/2014 03:47 PM, Nathanie

Re: [Freeipa-devel] FreeIPA 4.0.3?

2014-09-11 Thread Nathaniel McCallum
On Thu, 2014-09-11 at 16:09 +0200, Ludwig Krispenz wrote: > On 09/11/2014 04:04 PM, Martin Kosek wrote: > > On 09/11/2014 03:47 PM, Nathaniel McCallum wrote: > >> On Thu, 2014-09-11 at 15:46 +0200, Petr Viktorin wrote: > >>> On 09/11/2014 01:37 PM, Martin Kosek wrote: > Hi team, > >

Re: [Freeipa-devel] FreeIPA 4.0.3?

2014-09-11 Thread Martin Kosek
On 09/11/2014 04:22 PM, Nathaniel McCallum wrote: > On Thu, 2014-09-11 at 16:21 +0200, Ludwig Krispenz wrote: >> On 09/11/2014 04:17 PM, Nathaniel McCallum wrote: >>> On Thu, 2014-09-11 at 16:09 +0200, Ludwig Krispenz wrote: On 09/11/2014 04:04 PM, Martin Kosek wrote: > On 09/11/2014 03:47

Re: [Freeipa-devel] FreeIPA 4.0.3?

2014-09-11 Thread Nathaniel McCallum
On Thu, 2014-09-11 at 16:25 +0200, Ludwig Krispenz wrote: > On 09/11/2014 04:22 PM, Nathaniel McCallum wrote: > > On Thu, 2014-09-11 at 16:21 +0200, Ludwig Krispenz wrote: > >> On 09/11/2014 04:17 PM, Nathaniel McCallum wrote: > >>> On Thu, 2014-09-11 at 16:09 +0200, Ludwig Krispenz wrote: > O

Re: [Freeipa-devel] FreeIPA 4.0.3?

2014-09-11 Thread Petr Viktorin
On 09/11/2014 04:26 PM, Martin Kosek wrote: On 09/11/2014 04:22 PM, Nathaniel McCallum wrote: On Thu, 2014-09-11 at 16:21 +0200, Ludwig Krispenz wrote: On 09/11/2014 04:17 PM, Nathaniel McCallum wrote: On Thu, 2014-09-11 at 16:09 +0200, Ludwig Krispenz wrote: On 09/11/2014 04:04 PM, Martin Ko

Re: [Freeipa-devel] FreeIPA 4.0.3?

2014-09-11 Thread Nathaniel McCallum
On Thu, 2014-09-11 at 16:31 +0200, Petr Viktorin wrote: > On 09/11/2014 04:26 PM, Martin Kosek wrote: > > On 09/11/2014 04:22 PM, Nathaniel McCallum wrote: > >> On Thu, 2014-09-11 at 16:21 +0200, Ludwig Krispenz wrote: > >>> On 09/11/2014 04:17 PM, Nathaniel McCallum wrote: > On Thu, 2014-09-1

Re: [Freeipa-devel] FreeIPA 4.0.3?

2014-09-11 Thread Petr Viktorin
On 09/11/2014 04:28 PM, Nathaniel McCallum wrote: On Thu, 2014-09-11 at 16:25 +0200, Ludwig Krispenz wrote: On 09/11/2014 04:22 PM, Nathaniel McCallum wrote: On Thu, 2014-09-11 at 16:21 +0200, Ludwig Krispenz wrote: On 09/11/2014 04:17 PM, Nathaniel McCallum wrote: On Thu, 2014-09-11 at 16:09

Re: [Freeipa-devel] FreeIPA 4.0.3?

2014-09-11 Thread Ludwig Krispenz
On 09/11/2014 04:31 PM, Petr Viktorin wrote: On 09/11/2014 04:26 PM, Martin Kosek wrote: On 09/11/2014 04:22 PM, Nathaniel McCallum wrote: On Thu, 2014-09-11 at 16:21 +0200, Ludwig Krispenz wrote: On 09/11/2014 04:17 PM, Nathaniel McCallum wrote: On Thu, 2014-09-11 at 16:09 +0200, Ludwig Kri

Re: [Freeipa-devel] FreeIPA 4.0.3?

2014-09-11 Thread Petr Viktorin
On 09/11/2014 04:38 PM, Ludwig Krispenz wrote: On 09/11/2014 04:31 PM, Petr Viktorin wrote: On 09/11/2014 04:26 PM, Martin Kosek wrote: ... Also, we will need to add the F21 389-ds-base build to FreeIPA Copr: http://copr.fedoraproject.org/coprs/mkosek/freeipa/ so that F20 users can upgrade to

Re: [Freeipa-devel] FreeIPA 4.0.3?

2014-09-11 Thread Nathaniel McCallum
On Thu, 2014-09-11 at 16:39 +0200, Petr Viktorin wrote: > On 09/11/2014 04:38 PM, Ludwig Krispenz wrote: > > > > On 09/11/2014 04:31 PM, Petr Viktorin wrote: > >> On 09/11/2014 04:26 PM, Martin Kosek wrote: > ... > >>> Also, we will need to add the F21 389-ds-base build to FreeIPA Copr: > >>> http:

Re: [Freeipa-devel] FreeIPA 4.0.3?

2014-09-11 Thread Martin Kosek
On 09/11/2014 04:43 PM, Nathaniel McCallum wrote: > On Thu, 2014-09-11 at 16:39 +0200, Petr Viktorin wrote: >> On 09/11/2014 04:38 PM, Ludwig Krispenz wrote: >>> >>> On 09/11/2014 04:31 PM, Petr Viktorin wrote: On 09/11/2014 04:26 PM, Martin Kosek wrote: >> ... > Also, we will need to add

Re: [Freeipa-devel] FreeIPA 4.0.3?

2014-09-11 Thread Petr Viktorin
On 09/11/2014 04:43 PM, Nathaniel McCallum wrote: On Thu, 2014-09-11 at 16:39 +0200, Petr Viktorin wrote: On 09/11/2014 04:38 PM, Ludwig Krispenz wrote: On 09/11/2014 04:31 PM, Petr Viktorin wrote: On 09/11/2014 04:26 PM, Martin Kosek wrote: ... Also, we will need to add the F21 389-ds-base

Re: [Freeipa-devel] FreeIPA 4.0.3?

2014-09-11 Thread thierry bordaz
On 09/11/2014 04:46 PM, Martin Kosek wrote: On 09/11/2014 04:43 PM, Nathaniel McCallum wrote: On Thu, 2014-09-11 at 16:39 +0200, Petr Viktorin wrote: On 09/11/2014 04:38 PM, Ludwig Krispenz wrote: On 09/11/2014 04:31 PM, Petr Viktorin wrote: On 09/11/2014 04:26 PM, Martin Kosek wrote: ... A

Re: [Freeipa-devel] FreeIPA 4.0.3?

2014-09-11 Thread Nathaniel McCallum
On Thu, 2014-09-11 at 10:43 -0400, Nathaniel McCallum wrote: > On Thu, 2014-09-11 at 16:39 +0200, Petr Viktorin wrote: > > On 09/11/2014 04:38 PM, Ludwig Krispenz wrote: > > > > > > On 09/11/2014 04:31 PM, Petr Viktorin wrote: > > >> On 09/11/2014 04:26 PM, Martin Kosek wrote: > > ... > > >>> Also,

Re: [Freeipa-devel] FreeIPA 4.0.3?

2014-09-11 Thread Nathaniel McCallum
On Thu, 2014-09-11 at 16:48 +0200, Petr Viktorin wrote: > On 09/11/2014 04:43 PM, Nathaniel McCallum wrote: > > On Thu, 2014-09-11 at 16:39 +0200, Petr Viktorin wrote: > >> On 09/11/2014 04:38 PM, Ludwig Krispenz wrote: > >>> > >>> On 09/11/2014 04:31 PM, Petr Viktorin wrote: > On 09/11/2014 0

Re: [Freeipa-devel] FreeIPA 4.0.3?

2014-09-11 Thread Petr Viktorin
On 09/11/2014 04:51 PM, Nathaniel McCallum wrote: On Thu, 2014-09-11 at 16:48 +0200, Petr Viktorin wrote: On 09/11/2014 04:43 PM, Nathaniel McCallum wrote: On Thu, 2014-09-11 at 16:39 +0200, Petr Viktorin wrote: On 09/11/2014 04:38 PM, Ludwig Krispenz wrote: On 09/11/2014 04:31 PM, Petr Vikt

[Freeipa-devel] #4534: SSSD deref processing fail when entryusn can be read and objectclass doesn't

2014-09-11 Thread Martin Kosek
Hello, We have another important issue to resolve. Current FreeIPA 4.0.2 ACI settings cause older SSSD clients to fail as they get returned an LDAP deref call results without objectclass attribute and just with entryusn attribute. Details in https://fedorahosted.org/freeipa/ticket/4534. While I ag

Re: [Freeipa-devel] #4534: SSSD deref processing fail when entryusn can be read and objectclass doesn't

2014-09-11 Thread Ludwig Krispenz
On 09/11/2014 05:03 PM, Martin Kosek wrote: Hello, We have another important issue to resolve. Current FreeIPA 4.0.2 ACI settings cause older SSSD clients to fail as they get returned an LDAP deref call results without objectclass attribute and just with entryusn attribute. Details in https://f

Re: [Freeipa-devel] #4534: SSSD deref processing fail when entryusn can be read and objectclass doesn't

2014-09-11 Thread Simo Sorce
On Thu, 2014-09-11 at 17:03 +0200, Martin Kosek wrote: > Hello, > > We have another important issue to resolve. Current FreeIPA 4.0.2 ACI settings > cause older SSSD clients to fail as they get returned an LDAP deref call > results without objectclass attribute and just with entryusn attribute. >

Re: [Freeipa-devel] [PATCH] 720-729 OTP usability improvements

2014-09-11 Thread Petr Vobornik
On 10.9.2014 19:01, Endi Sukma Dewata wrote: On 9/9/2014 10:48 AM, Petr Vobornik wrote: [PATCH] 727 webui: hide empty fields and sections Will the "counter" field strictly have a value with HOTP only and "clock offset & interval" fields strictly have value with TOTP only? Do these fields cont

Re: [Freeipa-devel] [PATCH] 741 webui: add link to OTP token app

2014-09-11 Thread Petr Vobornik
On 5.8.2014 22:22, Nathaniel McCallum wrote: On Aug 5, 2014, at 11:11 AM, Petr Vobornik wrote: - display info message which points user to FreeOTP project page - the link or the text can be easily changed by a plugin if needed https://fedorahosted.org/freeipa/ticket/4469 Notes: - the design

Re: [Freeipa-devel] [PATCH] 741 webui: add link to OTP token app

2014-09-11 Thread Nathaniel McCallum
On Thu, 2014-09-11 at 18:10 +0200, Petr Vobornik wrote: > On 5.8.2014 22:22, Nathaniel McCallum wrote: > > > > On Aug 5, 2014, at 11:11 AM, Petr Vobornik wrote: > > > >> - display info message which points user to FreeOTP project page > >> - the link or the text can be easily changed by a plugin i

Re: [Freeipa-devel] #4534: SSSD deref processing fail when entryusn can be read and objectclass doesn't

2014-09-11 Thread Sumit Bose
On Thu, Sep 11, 2014 at 05:23:34PM +0200, Ludwig Krispenz wrote: > > On 09/11/2014 05:03 PM, Martin Kosek wrote: > >Hello, > > > >We have another important issue to resolve. Current FreeIPA 4.0.2 ACI > >settings > >cause older SSSD clients to fail as they get returned an LDAP deref call > >result

Re: [Freeipa-devel] #4534: SSSD deref processing fail when entryusn can be read and objectclass doesn't

2014-09-11 Thread Simo Sorce
On Thu, 2014-09-11 at 18:19 +0200, Sumit Bose wrote: > On Thu, Sep 11, 2014 at 05:23:34PM +0200, Ludwig Krispenz wrote: > > > > On 09/11/2014 05:03 PM, Martin Kosek wrote: > > >Hello, > > > > > >We have another important issue to resolve. Current FreeIPA 4.0.2 ACI > > >settings > > >cause older S

Re: [Freeipa-devel] [PATCH 0291-0294] Fix locking to prevent crashes and deadlocks

2014-09-11 Thread Martin Basti
On 11/09/14 15:57, Martin Basti wrote: On 11/09/14 11:59, Petr Spacek wrote: Hello, I was fighting with random crashes for couple of days ... and discovered that run_exclusive_enter()/isc_task_beginexclusive() usage was completely incorrect and didn't actually lock anything. This series of

Re: [Freeipa-devel] #4534: SSSD deref processing fail when entryusn can be read and objectclass doesn't

2014-09-11 Thread Martin Kosek
On 09/11/2014 05:37 PM, Simo Sorce wrote: On Thu, 2014-09-11 at 17:03 +0200, Martin Kosek wrote: Hello, We have another important issue to resolve. Current FreeIPA 4.0.2 ACI settings cause older SSSD clients to fail as they get returned an LDAP deref call results without objectclass attribute a

Re: [Freeipa-devel] #4534: SSSD deref processing fail when entryusn can be read and objectclass doesn't

2014-09-11 Thread Simo Sorce
On Thu, 2014-09-11 at 20:28 +0200, Martin Kosek wrote: > On 09/11/2014 05:37 PM, Simo Sorce wrote: > > On Thu, 2014-09-11 at 17:03 +0200, Martin Kosek wrote: > >> Hello, > >> > >> We have another important issue to resolve. Current FreeIPA 4.0.2 ACI > >> settings > >> cause older SSSD clients to f

Re: [Freeipa-devel] [PATCH 0291-0294] Fix locking to prevent crashes and deadlocks

2014-09-11 Thread Petr Spacek
On 11.9.2014 18:34, Martin Basti wrote: On 11/09/14 15:57, Martin Basti wrote: On 11/09/14 11:59, Petr Spacek wrote: Hello, I was fighting with random crashes for couple of days ... and discovered that run_exclusive_enter()/isc_task_beginexclusive() usage was completely incorrect and didn't ac

Re: [Freeipa-devel] #4534: SSSD deref processing fail when entryusn can be read and objectclass doesn't

2014-09-11 Thread Martin Kosek
On 09/11/2014 08:49 PM, Simo Sorce wrote: On Thu, 2014-09-11 at 20:28 +0200, Martin Kosek wrote: On 09/11/2014 05:37 PM, Simo Sorce wrote: On Thu, 2014-09-11 at 17:03 +0200, Martin Kosek wrote: Hello, We have another important issue to resolve. Current FreeIPA 4.0.2 ACI settings cause older S

Re: [Freeipa-devel] FreeIPA 4.0.3?

2014-09-11 Thread Nathaniel McCallum
On Thu, 2014-09-11 at 16:48 +0200, Petr Viktorin wrote: > On 09/11/2014 04:43 PM, Nathaniel McCallum wrote: > > On Thu, 2014-09-11 at 16:39 +0200, Petr Viktorin wrote: > >> On 09/11/2014 04:38 PM, Ludwig Krispenz wrote: > >>> > >>> On 09/11/2014 04:31 PM, Petr Viktorin wrote: > On 09/11/2014 0

Re: [Freeipa-devel] #4534: SSSD deref processing fail when entryusn can be read and objectclass doesn't

2014-09-11 Thread Lukas Slebodnik
On (11/09/14 22:24), Martin Kosek wrote: >On 09/11/2014 08:49 PM, Simo Sorce wrote: >>On Thu, 2014-09-11 at 20:28 +0200, Martin Kosek wrote: >>>On 09/11/2014 05:37 PM, Simo Sorce wrote: On Thu, 2014-09-11 at 17:03 +0200, Martin Kosek wrote: >Hello, > >We have another important issue